Summary (TL;DR): Resolve "Access Restricted" errors or a missing Procure tab by adjusting role permissions and verifying Location or Department access levels.
The Issue
Users may be unable to see the Procure tab, view Purchase Orders (POs), or may encounter an "Access Restricted" error when attempting to comment on a PO. This occurs even if the user can see other modules like Order Requests.
Potential Causes
Missing Role Permissions: The user's assigned role does not include the "Procure" or "Create and View Purchase Orders" permission.
Location/Department Mismatch: The user lacks access to the specific Location or Department associated with the PO's Billing Address.
Billing Address Logic: Unlike requests, PO access is governed by the Billing Address location rather than the item's location.
Resolution Steps
1. Enable Procure Role Permissions
A Superuser must grant the foundational permission to access the module.
Navigate to Settings > Manage Users.
Select the applicable user and click the Roles & Permissions tab.
Click Edit Permissions.
Check the box for Procure, or use the dropdown arrow to select specific granular permissions like Create and View Purchase Orders.
Click Apply.
2. Assign Location & Department Access
If the user has the correct role but still cannot see specific POs, verify their organizational access.
In the user's Roles & Permissions tab, locate the Procure permission line.
Click the Locations button next to Procure.
Select the Locations that match the PO Billing Addresses and click Assign selected locations.
If applicable: If your domain uses "Procure by Department," click the Departments button and ensure the correct departments are selected.
NOTE: Standard "Create and View Purchase Orders" permissions do not always require specific location assignments, but full Procure roles do require them to filter data visibility correctly.
Escalation Path
If the Procure tab is still missing after these adjustments, contact your internal Procurify Administrator to ensure there are no conflicting custom roles or global domain restrictions.